18.198.245.55 - IPInfo

Basic Info

City: Frankfurt am Main

Region: Hesse

Country: Germany

Internet Service Provider: unknown

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:

Make a comment on this IP

No discussion about this IP yet. Click above link to make one.

Comments on same subnet:

No discussion about this subnet yet..

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 18.198.245.55
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 10749
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;18.198.245.55.			IN	A

;; AUTHORITY SECTION:
.			451	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2020052901 1800 900 604800 86400

;; Query time: 101 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sat May 30 07:36:12 CST 2020
;; MSG SIZE  rcvd: 117

Host info

55.245.198.18.in-addr.arpa domain name pointer ec2-18-198-245-55.eu-central-1.compute.amazonaws.com.

Nslookup info:

Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
55.245.198.18.in-addr.arpa	name = ec2-18-198-245-55.eu-central-1.compute.amazonaws.com.

Authoritative answers can be found from:

Related IP info:

Related comments:

IP	Type	Details	Datetime
47.9.93.23	attackspambots	20/8/12@23:46:47: FAIL: Alarm-Network address from=47.9.93.23 ...	2020-08-13 19:45:01
188.50.19.109	attack	Icarus honeypot on github	2020-08-13 19:37:15
49.232.191.178	attackspambots	Aug 11 00:41:34 h2022099 sshd[5236]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.232.191.178 user=r.r Aug 11 00:41:36 h2022099 sshd[5236]: Failed password for r.r from 49.232.191.178 port 35060 ssh2 Aug 11 00:41:36 h2022099 sshd[5236]: Received disconnect from 49.232.191.178: 11: Bye Bye [preauth] Aug 11 00:49:37 h2022099 sshd[6005]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.232.191.178 user=r.r Aug 11 00:49:39 h2022099 sshd[6005]: Failed password for r.r from 49.232.191.178 port 33544 ssh2 Aug 11 00:49:39 h2022099 sshd[6005]: Received disconnect from 49.232.191.178: 11: Bye Bye [preauth] Aug 11 00:55:28 h2022099 sshd[7071]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.232.191.178 user=r.r Aug 11 00:55:30 h2022099 sshd[7071]: Failed password for r.r from 49.232.191.178 port 38760 ssh2 Aug 11 00:55:30 h2022099 sshd[7071]: Receiv........ -------------------------------	2020-08-13 19:19:58
150.138.249.222	attack	Attempted connection to port 16491.	2020-08-13 19:40:48
85.57.145.133	attack	Aug 13 08:31:54 WHD8 dovecot: pop3-login: Disconnected: Inactivity $auth failed, 1 attempts in 179 secs$: user=\, method=PLAIN, rip=85.57.145.133, lip=10.64.89.208, session=\ Aug 13 08:32:02 WHD8 dovecot: pop3-login: Disconnected: Inactivity $auth failed, 1 attempts in 180 secs$: user=\, method=PLAIN, rip=85.57.145.133, lip=10.64.89.208, session=\ Aug 13 08:46:54 WHD8 dovecot: pop3-login: Disconnected: Inactivity $auth failed, 1 attempts in 180 secs$: user=\, method=PLAIN, rip=85.57.145.133, lip=10.64.89.208, session=\ Aug 13 08:47:02 WHD8 dovecot: pop3-login: Disconnected: Inactivity $auth failed, 1 attempts in 180 secs$: user=\, method=PLAIN, rip=85.57.145.133, lip=10.64.89.208, session=\ Aug 13 09:01:54 WHD8 dovecot: pop3-login: Disconnected: Inactivity $auth failed, 1 attempts in 180 secs$: user=\ ...	2020-08-13 19:29:05
84.27.182.186	attackspambots	Invalid user pi from 84.27.182.186 port 59074 pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=84-27-182-186.cable.dynamic.v4.ziggo.nl Invalid user pi from 84.27.182.186 port 59074 Failed password for invalid user pi from 84.27.182.186 port 59074 ssh2 Invalid user pi from 84.27.182.186 port 36136	2020-08-13 19:18:22
80.82.78.100	attackspam	firewall-block, port(s): 1067/udp, 1088/udp	2020-08-13 19:27:25
185.53.129.117	attackbots	Lines containing failures of 185.53.129.117 Aug 13 05:47:23 mellenthin sshd[8001]: User r.r from 185.53.129.117 not allowed because not listed in AllowUsers Aug 13 05:47:23 mellenthin sshd[8001]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=185.53.129.117 user=r.r Aug 13 05:47:25 mellenthin sshd[8001]: Failed password for invalid user r.r from 185.53.129.117 port 44112 ssh2 Aug 13 05:47:25 mellenthin sshd[8001]: Received disconnect from 185.53.129.117 port 44112:11: Bye Bye [preauth] Aug 13 05:47:25 mellenthin sshd[8001]: Disconnected from invalid user r.r 185.53.129.117 port 44112 [preauth] ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=185.53.129.117	2020-08-13 19:13:47
145.239.82.87	attack	$f2bV_matches	2020-08-13 19:34:53
192.3.177.213	attackbotsspam	2020-08-13T06:30:59.711066mail.thespaminator.com sshd[5381]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=192.3.177.213 user=root 2020-08-13T06:31:01.490610mail.thespaminator.com sshd[5381]: Failed password for root from 192.3.177.213 port 49390 ssh2 ...	2020-08-13 19:22:10
183.136.145.234	attackbots	Attempted connection to port 1433.	2020-08-13 19:36:22
117.50.99.197	attack	Aug 13 15:45:52 webhost01 sshd[1790]: Failed password for root from 117.50.99.197 port 61444 ssh2 ...	2020-08-13 19:04:17
106.52.188.43	attackbotsspam	Aug 13 11:21:26 webhost01 sshd[31428]: Failed password for root from 106.52.188.43 port 54144 ssh2 ...	2020-08-13 19:19:18
51.254.100.56	attackbots	Aug 13 11:15:01 ns3033917 sshd[17790]: Failed password for root from 51.254.100.56 port 54830 ssh2 Aug 13 11:19:35 ns3033917 sshd[17831]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.254.100.56 user=root Aug 13 11:19:36 ns3033917 sshd[17831]: Failed password for root from 51.254.100.56 port 38948 ssh2 ...	2020-08-13 19:24:58
128.14.230.200	attackbotsspam	Aug 13 08:04:13 fhem-rasp sshd[9983]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=128.14.230.200 user=root Aug 13 08:04:15 fhem-rasp sshd[9983]: Failed password for root from 128.14.230.200 port 52526 ssh2 ...	2020-08-13 19:14:05

Recently Reported IPs

51.158.98.224	162.243.136.61	110.147.217.25	94.192.255.20
58.102.31.36	209.101.195.157	132.220.53.225	30.193.198.53
37.132.51.216	120.135.133.115	6.124.106.225	112.96.163.66
189.82.0.243	192.197.90.248	39.1.202.253	176.57.145.41
97.50.87.116	193.112.54.190	95.104.224.0	124.184.193.234